Function auth_for 

pub fn auth_for(registry: &str) -> RegistryAuth

Pick the registry-auth strategy for a host.

Google Artifact Registry (*.pkg.dev) and Container Registry (gcr.io / *.gcr.io) require a GCP OAuth token; every other host (notably public GHCR) uses the anonymous pull-token flow.